Remove `nodes/proxy` permission and use fine grained permissions like `nodes/log`

[jimmyjones2]

Now that Kubernetes v1.36 has been released and fine-grained Kubelet API authorization is GA, please switch to fine grained permissions such as nodes/log. This will block a know lateral movement technique that could be exploited using cloudwatch observability.

[zhihonl]

Hi @jimmyjones2, thanks for bringing this up to our attention, I have created a feature request for this change so we can keep track of this.